From fb6c3a3082acc2e7a6118dff08e338ab23d6f891 Mon Sep 17 00:00:00 2001 From: Alexey Martemyanov Date: Wed, 20 May 2026 18:11:06 +0600 Subject: [PATCH] Failed to authenticate. API Error: 401 Invalid authentication credentials [2026-05-20] vault sync --- .../personal-os/executor-security-analysis.md | 30 +++++++++---------- work/briefs/inbox/2026-05-20.md | 10 +++---- 2 files changed, 20 insertions(+), 20 deletions(-) diff --git a/personal/projects/personal-os/executor-security-analysis.md b/personal/projects/personal-os/executor-security-analysis.md index 2ebff88b..12cac306 100644 --- a/personal/projects/personal-os/executor-security-analysis.md +++ b/personal/projects/personal-os/executor-security-analysis.md @@ -381,21 +381,21 @@ Primary locations: ### Q6: Canonical credential and tool inventory -| Service | Access type | Credential | Status | -|---|---|---|---| -| **Asana** | Read + Write | `ASANA_API_KEY` in `~/.config/personal-os/env` | **Still in file. Verify + revoke.** | -| **Asana MCP (×2)** | Read + Write | Same PAT, via Anthropic-hosted MCP | **Remove both connectors from Claude.ai.** | -| **GitHub** | Read + Write (push, PR, CI) | `gh` CLI (keychain or SSH) | **Verify + rotate.** | -| **Discord** | Read + Write | `DISCORD_BOT_TOKEN` in `~/.hermes/.env` | Active. Full server access. | -| **Anthropic/Claude API** | Execute (LLM) | `CLAUDE_CODE_OAUTH_TOKEN` in `~/.hermes/.env` | Active. Primary executor engine. | -| **OpenRouter** | Execute (LLM fallback) | `OPENROUTER_API_KEY` in `~/.hermes/.env` | Active. | -| **Telegram** | Write | `TELEGRAM_BOT_TOKEN` in `~/.hermes/.env` | Active. Not used by executor. | -| **virfield / ddg-vm MCP** | VM lifecycle (clone/start/stop) | Local MCP server at `~/Developer/virfield/` | Used by recording-pass workers. | -| **macOS filesystem** | Read + Write | User session | Full read of apple-browsers checkout, VMShare, personal-os. Write to logs, worktrees, prompts. | -| **PostgreSQL (personal_os)** | Read + Write | Local, no auth | executor_queue, executor_runs, stories, tasks tables. | -| **Zulip** | Read + Write | `ZULIP_API_KEY` in `~/.hermes/.env` | Active. Post-migration platform. | -| **Obsidian vault** | Read + Write | Local MCP server | Full vault access. | -| **Hermes cron system** | Read + Write | Local process | Agent read/modified jobs.json, paused/deleted cron jobs. | +| Service | Access type | Credential | Status | +| ---------------------------- | ------------------------------- | ---------------------------------------------- | ---------------------------------------------------------------------------------------------- | +| **Asana** | Read + Write | `ASANA_API_KEY` in `~/.config/personal-os/env` | **Still in file. Verify + revoke.** | +| **Asana MCP (×2)** | Read + Write | Same PAT, via Anthropic-hosted MCP | **Remove both connectors from Claude.ai.** | +| **GitHub** | Read + Write (push, PR, CI) | `gh` CLI (keychain or SSH) | **Verify + rotate.** | +| **Discord** | Read + Write | `DISCORD_BOT_TOKEN` in `~/.hermes/.env` | Active. Full server access. | +| **Anthropic/Claude API** | Execute (LLM) | `CLAUDE_CODE_OAUTH_TOKEN` in `~/.hermes/.env` | Active. Primary executor engine. | +| **OpenRouter** | Execute (LLM fallback) | `OPENROUTER_API_KEY` in `~/.hermes/.env` | Active. | +| **Telegram** | Write | `TELEGRAM_BOT_TOKEN` in `~/.hermes/.env` | Active. Not used by executor. | +| **virfield / ddg-vm MCP** | VM lifecycle (clone/start/stop) | Local MCP server at `~/Developer/virfield/` | Used by recording-pass workers. | +| **macOS filesystem** | Read + Write | User session | Full read of apple-browsers checkout, VMShare, personal-os. Write to logs, worktrees, prompts. | +| **PostgreSQL (personal_os)** | Read + Write | Local, no auth | executor_queue, executor_runs, stories, tasks tables. | +| **Zulip** | Read + Write | `ZULIP_API_KEY` in `~/.hermes/.env` | Active. Post-migration platform. | +| **Obsidian vault** | Read + Write | Local MCP server | Full vault access. | +| **Hermes cron system** | Read + Write | Local process | Agent read/modified jobs.json, paused/deleted cron jobs. | **Services confirmed NOT accessible at the time:** - Email (IMAP/SMTP) — not configured diff --git a/work/briefs/inbox/2026-05-20.md b/work/briefs/inbox/2026-05-20.md index 96c7ea43..9f5df8ca 100644 --- a/work/briefs/inbox/2026-05-20.md +++ b/work/briefs/inbox/2026-05-20.md @@ -1,13 +1,13 @@ -## Inbox Triage — 2026-05-20 (since 2026-05-19T19:38) +## Inbox Triage — 2026-05-20 (since 2026-05-20T16:38:22) ### New / Changed — Action Required -*(nothing requiring immediate action)* +_(nothing requiring immediate response)_ ### New / Changed — Monitoring -- **[Desktop Browser Feature Owner Survey [anonymous, 5 minute timebox]](https://app.asana.com/0/0/1214940335721015)** — new assignment (inbox) · due May 26 · 5 min survey, anonymous. No reply needed, just complete before deadline. +- **New task (self-captured)** — [Address Universal Input (UTI) issues](https://app.asana.com/0/0/1214965000075517) — created by Alex M, assigned to Alex M at 16:48 — section: inbox, no project yet. Needs triage / project assignment. -### Nothing new +### Nothing new (external signals) -No new human comments on open tasks, no @mentions since last run (19:38 Almaty). +No new comments from others, no external task assignments, no @mentions since last run.